Group Policy Management Console extension
You can work in the Group Policy Management Console (GPMC) to perform many GPO-related tasks. GPOADmin comes with two interfaces — the GPOADmin Console, and the GPMC Extension. The console provides full functionality, and is intended for administrators responsible for a wide variety of tasks. The GPMC Extension is a convenient tool for users who are already comfortable with the GPMC, or for GPO administrators who do not need the advanced features of the GPOADmin Console.
The following tasks can be performed using the GPMC Extension:
For more information, see Using GPOADmin and Accessing the GPMC extension .
GPOs, scripts, DSC scripts, WMI filters, configuration profiles, and Scopes of Management (domains, sites, and OUs) links can be stored and backed up in a secure Active Directory, AD LDS, network share, or SQL repository. Objects that are stored within the Version Control system are labeled with a version number. You can view all changes made to the controlled object through the object history and through numerous reports.
For detailed information, see Registering objects , Proposing the creation of controlled objects and Controlled object reports .
Change approval process
All changes made within the Version Control system are not rolled out into the online Active Directory environment until assigned users approve and deploy them.
You can enforce a multi-approval process at the container and object level so that all changes made to the live production environment are approved by all approvers. Ensuring the approval process uses the combined agreement of multiple approvers rather than just one provides better security.
Deploying changes within the system is a critical process that affects the live environment. To minimize the impact of disruption, perform this when the impact to users is minimal as the changes to the GPO might alter the behavior of particular systems.
To avoid any issues, you can schedule the deployment of the changes for a specific date and time that best suits your needs.
For detailed information, see Approving and rejecting edits and Deploying objects (scheduling and associated items) .
GPOADmin users can create and define roles that consist of a set of roles to perform actions on the Version Control system. These roles can delegate users-specific access to resources within the system. GPOADmin includes predefined built-in roles (Moderator, System Administrator, and User), and granular roles users can define through a custom role. For a list of roles, see Configuring role-based delegation.
For more information, see Configuring the Version Control server and Configuring role-based delegation .